Share / file permission related

Setting up permission on Windows 2003 share (AD is used):
on shared folder:
..for "SHARING" permission: add Domain Users with Read AND CHANGE permission allowed
..for "SECURITY" permission: add Users with "Read & Execute", "List folder contents" and Read permission at minimum
on subfolders:
..add "SECURITY" permission as needed on per user/group basis